[Quagga-bugs] [Bug 354] bgpd vulnerable to DoS by configured peers

[bugzilla-daemon at allevil.dishone.st]

Please do not reply directly to this email. All additional  
comments should be made in the comments box of this bug  
report.  
  
http://bugzilla.quagga.net/show_bug.cgi?id=354  
  




------- Additional Comments From paul at dishone.st  2007-04-08 23:43 -------
Created an attachment (id=144)
 --> (http://bugzilla.quagga.net/attachment.cgi?id=144&action=view)
Proposed fix for BGP Multi-Protocol NLRI DoS problem

Attached patch against 0.99 CVS updates MP_REACH/UNREACH_NLRI parsers to use
STREAM_READABLE carefully to ensure reads from packet buffer remain in bounds.
  
  
  
  
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.